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DETAILED ACTION 

1 . Claims 1-32 are currently presented in this application. 

Claim Rejections - 35 USC§103 

2. The text of those sections of Title 35, U.S. Code not included in this action can be found 
in a prior Office action. 

3. Claims 1-32 are rejected under 35 U.S.C. 103(a) as being unpatentable over Al-Ghosein 
et al. (U.S. 6,473,791 Bl) in view of Hunt (U.S. 6,230,312 Bl). 

4. As to claim 1 : 

a. Al-Ghosein teaches the invention substantially as claimed including a method for 
applying one or more policy constraints (security policies; see the abstract) in an 
application program (applications; see the abstract), the method comprising the 
computer-implemented step of: redirecting a request to invoke a routine contained 
in the application program to a policy broker (system components 60] -60n 'e.g., 
applications ' make calls to an intelligent trust manager 62 in order to have trust 
decisions made therefor in accordance with a predetermined policy. To obtain a 
decision, the intelligent trust manager 62 in turn communicates with a policy 
manager 64; coL4, lines 12-18) wherein the processing of the request to invoke 
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the routine by the policy broker causes the one or more policy constraints to be 
applied to invocation of the routine (a policy manager 64 to invoke an 
appropriate one of the policy objects 66 j- 66n. The corresponding policy object 
'e.g. 663 ' makes an advisory decision, i.e., yes, no or insufficient information to 
make a determination, and returns the decision to the system component (e.g., 
60 j) via the intelligent trust manager 62; col.4, lines 17-23). 

b. Al-Ghosein does not specifically teach ' Vithout modifying program code." 

c. Hunt teaches without modifying program code (without modifying application 
sources; coL37, lines 22-29). 

d. It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teachings of Al-Ghosein with Hunt because 
Hunt's teachings would allowed a programmer to insert or remove constraints on 
a specific application without changing the application sources. Therefore, 
reducing cost and improving performance and efiBciency of Al-Ghosein's system. 

5. As to claim 2: 

Al-Ghosein teaches the redirecting of the request to the policy broker is performed by 
invoking a routine managed by the policy broker (to obtain a decision, the intelligent 
trust manager 62 in turn communicates with a policy manager 64 to invoke an 
appropriate one of the policy objects 66}- 66^; col4, lines 16-19). 

6. As to claim 3: 
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Al-Ghosein teaches substituting original code contained in the routine with replacement 
code that invokes a routine managed by the policy broker (to replace a policy... invoke 
the other policy instead of the existing policy; coL4, lines 38-42). 

7. As to claim 4: 

Al-Ghosein teaches the replacement code includes only code that invokes a routine 
managed by the policy broker (policy objects are COM objects, they include executable 
code for making decisions; coL4, lines 46-47), 

8. As to claim 5: 

a. Hunt teaches the original code is original source code and the replacement code is 
replacement source code (source code; colSl, lines 31-36 and coL55, lines 26- 
27). 

b. It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teachings of Al-Ghosein with Hunt because 
Hunt's teachings would have provided the capabiUty for automatically detecting 
location constraints on the placement of units of an application program. 

9. As to claim 6: 

a. Hunt teaches the original code is original object code and the replacement code is 
replacement object code (object; colSl, lines 31-36 and coL55, lines 24-25). 

b. It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teachings of Al-Ghosein with Hunt because 
Hunt's teachings would have provided the capability for automatically detecting 
location constraints on the placement of units of an application program. 
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10. As to claim 7: 

Al-Ghosein teaches the one or more poHcy constraints include one or more security 
constraints (if a decision to access a file for read and write.. .a security identifier is 
needed; col. 6, lines 5-1 1). 

11. As to claim 8; 

It is directed to a computer-readable medium for implementing the method of claim 1 
above, and is similarly rejected under the same rationale. Additionally, Al-Ghosein 
further teaches one or more processors (see fig, 2). 

12. As to claims 9-14: 

They are directed to a computer-readable medium for implementing the method of claims 
2-7 above, and are similarly rejected under the same rationale. 

13. As to claim 15 : 

a. Al-Ghosein teaches the invention substantially as claimed including a method for 
implementing policy constraints (implementing security policies; see the abstract) 
in an application program (applications; see the abstract)^ the method comprising 
the computer-implemented steps of: identifying a routine in the application 
program for which one or more policy constraints are to be applied, wherein the 
routine is invoked by program code contained in the appUcation program 
(applications create a request describing an action that needs to be checked 
against an appropriate security policy. The request is given to a trust system that 
determines which policy object applies to the request; see the abstract)^ and 
substituting replacement code for original code contained in the identified routine 
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(to replace a policy with another policy,. Anvoke the other policy instead of the 
existing policy; col 4, lines 38-42), wherein execution of the replacement code by 
one or more processors causes the one or more policy constraints to be applied 

(allows policies to be shared by numerous system components; col 4, lines 43- 
46). 

b. Al-Ghosein does not specifically teach "without modifying program code." 

c. Hunt teaches without modifying program code (without modifying application 
sources; col 37, lines 22-29). 

d. It would have been obvious to a person of ordinary skill in the art at the time the 
invention was made to combine the teachings of Al-Ghosein with Hunt because 
Hunt's teachings would allowed a programmer to insert or remove constraints on 
a specific application without modifying the application sources. 

14. As to claim 16: 

Al-Ghosein teaches the substitution of the replacement code for the original code is 
performed without changing any calls to the routine that are contained in the application 
program (col4, lines 35-42). 

15. As to claim 17: 

Al-Ghosein teaches the replacement code contains the original code (col4, lines 63-66). 

16. As to claims 18-20: 

They include the same limitations as in claims 5-7 above, and are similarly rejected under 
the same rationale. 

17. As to claim 21: 
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It is directed to a computer-readable medium for implementing the method of claim 15 
above, and is similarly rejected under the same rationale. 

18. As to claims 22 and 23 : 

They include the same limitations as in claims 16 and 17 above, and are similarly rejected 
under the same rationale. 

19. As to claims 24-26: 

They include the same Umitations as in claims 5-7 above, and are similarly rejected under 
the same rationale. 

20. As to claim 27 : 

It is directed to an apparatus for performing the method of claim 15 above, and is 
similarly rejected under the same rationale. Additionally, Al-Ghosein further teaches a 
memory (a system memory 22; col.2, lines 45-46). 

21. As to claims 28 and 29: 

They include the same limitations as in claims 16 and 17 above, and are similarly rejected 
under the same rationale. 

22. As to claims 30-32: 

They include the same limitations as in claims 5-7 above, and are similarly rejected under 
the same rationale. 
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Response to Arguments 

23. Applicant's arguments filed May 23, 2005 have been fully considered but they are not 
persuasive. 

24. In the remarks, Applicant argued in substance that (a) the Al-Ghosein or Hunt, either 
individually or in combination does not teach wherein the processing of the request to 
invoke the routine by the policy broker causes the one or more poUcy constraints to be 
applied to invocation of the routine; (b) no portion of Al-Ghosein teaches without 
modifying the program code, substituting replacement code for original code contained in 
the identified routine, wherein execution of the replacement code by one or more 
processors causes the one or more policy constraints to be applied. 



25, Examiner respectfully traverses Applicant's remarks. 

(i) As to point (a), Al-Ghosein's teaching "a policy manager 64 to invoke an 

appropriate one of the policy objects 66 r 66n^ The corresponding policy object 
'e.g. 66s ' makes an advisory decision, i.e., yes, no or insufficient information to 
make a determination, and returns the decision to the system component (e.g., 
60 1) via the intelligent trust manager 62*' (coL4, lines 17-23) does meet *the 
processing of the request to invoke the routine by the policy broker causes the one 
or more policy constraints to be applied to invocation of the routine" as claimed 
by Applicant. 
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(ii) As to point (b), contrary to Applicant's contention, Al-Ghosein teaches 

substituting replacement code for original code contained in the identified routine 
(to replace a policy with another policy,,, invoke the other policy instead of the 
existing policy; col. 4, lines 38-42), wherein execution of the replacement code by 
one or more processors causes the one or more policy constraints to be applied 
(allows policies to be shared by numerous system components; col, 4, lines 43-46) 
and Hunt is combined with Al-Ghosein to teach "without modifying the program 
code" (Hunt; coL37, lines 22-29). 
26. Accordingly, the combination of Al-Ghosein and Hunt meets the limitations as broadly 
claimed by Applicant. 

Conclusion 



27. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 

- Frey et al. (US 6567818 Bl) "Employing management policies to manage instances of 
objects" 

- Frey et al. (US 6505210 Bl) "System and method for rapid wireless application 
Federation of naming contexts across multiple and/or diverse underlying directory technologies 

- Gartner et al (US 6438950 Bl) "System and method for rapid wireless application 
Computer system with preferential naming service" 
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- Cobb et al. (US 6070197 Bl) "System and method for rapid wireless application Object 
oriented transaction monitor for distributed transaction processing environments" 

28. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1.136(a). 

29. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

30. Any inquiry or a general nature or relating to the status of this application should be 
directed to the TC 2100 Group receptionist: (571) 272-2100. 
Any inquiry conceming this communication or earlier communications from the 
examiner should be directed to VAN H. NGUYEN whose telephone number is (571) 
272-3765. The examiner can normally be reached on Monday-Thursday from 8:30AM - 
6:00PM. The examiner can also be reached on alternative Friday. 
If attempts to reach the examiner by telephone are unsuccessfiil, the examiner's 
supervisor Meng-Ai An can be reached on (571) 272-3756. 
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The fax phone number for the organization where this appUcation or proceeding is 
assigned is 571-273-8300. 

Information regarding thie status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpubUshed applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.goy. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

Any response to this action should be mailed to: 
Commissioner for patents 
P O Box 1450 

Alexandria, VA 22313-1450 




MENG^LT.AN 

SUPERVISORY PATENT EXAJS/ISMER 

TEGK!\:o'OSYCi::Tr^J^ r.z: 



